Fix bug #707 cert hostnames not being checked

- only happened when openssl v1.1 is used
e2guardian · Nov 23, 2021 · eae46a7 · eae46a7
1 parent 69e23de
commit eae46a7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Socket.cpp b/src/Socket.cpp
@@ -377,6 +377,10 @@ int Socket::startSslClient(const std::string &certificate_path, String hostname)
     //fcntl(this->getFD() ,F_SETFL, O_NONBLOCK); // blocking mode used currently
     SSL_set_fd(ssl, this->getFD());
     SSL_set_tlsext_host_name(ssl, hostname.c_str());
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
+#else
+  X509_VERIFY_PARAM_set1_host(SSL_get0_param(ssl),hostname.c_str(),0);
+#endif
 
     //make io non blocking as select wont tell us if we can do a read without blocking
     //BIO_set_nbio(SSL_get_rbio(ssl),1l);  // blocking mode used currently